The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 28, 2015

Filed:

Jul. 24, 2013
Applicant:

Fortinet, Inc., Sunnyvale, CA (US);

Inventors:

Zahid Hussain, San Jose, CA (US);

Tim Millet, Mountain View, CA (US);

Assignee:

Fortinet, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 12/26 (2006.01); H04J 1/16 (2006.01); G08C 15/00 (2006.01); H04L 12/54 (2013.01); H04L 12/701 (2013.01); H04L 12/713 (2013.01); H04L 12/773 (2013.01); H04L 12/801 (2013.01); H04L 12/803 (2013.01); H04L 12/851 (2013.01); H04L 12/857 (2013.01); H04L 12/823 (2013.01); H04L 12/863 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 47/125 (2013.01); H04L 12/5693 (2013.01); H04L 45/00 (2013.01); H04L 45/586 (2013.01); H04L 45/60 (2013.01); H04L 47/10 (2013.01); H04L 47/2408 (2013.01); H04L 47/2441 (2013.01); H04L 47/2491 (2013.01); H04L 47/326 (2013.01); H04L 47/6215 (2013.01); H04L 47/623 (2013.01); H04L 63/0236 (2013.01); H04L 63/0272 (2013.01); H04L 63/0428 (2013.01); H04L 63/062 (2013.01); H04L 63/101 (2013.01); H04L 63/164 (2013.01); H04L 69/24 (2013.01);
Abstract

Methods and systems for providing IP services in an integrated fashion are provided. According to one embodiment, packets are load balanced among virtual routing processing resources of an IP service generator of a virtual router (VR) based switch. A packet flow cache is maintained with packet flow entries containing information indicative of packet processing actions for established packet flows. Deep packet classification is performed to determine whether a packet is associated with an established packet flow. If so, the packet is directed to one of multiple virtual services processing resources representing application-tailored engines configured to provide managed firewall services. If the packet is allowed, it is returned to the source virtual routing processing resource for forwarding.


Find Patent Forward Citations

Loading…